Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/jk6fv2odtlCUizMnyGKO07XW3tU.roa
File: jk6fv2odtlCUizMnyGKO07XW3tU.roa (raw, json)
Hash identifier: /RUgrFyItf2wgEnXt1fpLWaq6Dvc86Ws1PxtlXTt1zQ=
Subject key identifier: 8E:4E:9F:BF:6A:1D:B6:50:94:8B:33:27:C8:62:8E:D3:B5:D6:DE:D5
Certificate issuer: /CN=06f766f1de13aec7fb050193f8329a6609e0095d
Certificate serial: 0AC757E9
Authority key identifier: 06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/jk6fv2odtlCUizMnyGKO07XW3tU.roa
Signing time: Sat 01 Jan 2022 10:55:11 +0000
ROA not before: Sat 01 Jan 2022 10:55:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202460
IP address blocks: 193.57.72.0/24 maxlen: 24
193.57.72.0/22 maxlen: 22
193.57.73.0/24 maxlen: 24
193.57.74.0/24 maxlen: 24
193.57.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180836329 (0xac757e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f766f1de13aec7fb050193f8329a6609e0095d
Validity
Not Before: Jan 1 10:55:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e4e9fbf6a1db650948b3327c8628ed3b5d6ded5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:19:2c:b0:a6:72:e9:ad:87:19:5a:8f:27:5c:
15:ac:ae:1e:b1:78:a6:b0:f5:77:0b:3b:af:5e:d0:
7e:cd:8c:ea:70:bf:2c:e0:ad:ac:27:3a:8a:de:9d:
17:b1:69:56:e9:22:46:eb:ff:fb:d9:49:4c:6e:e7:
df:53:64:f6:07:38:21:83:6e:01:6f:cc:a0:6e:a1:
4f:c9:e3:9e:5c:87:5c:b4:64:73:74:d4:af:e9:e4:
80:63:33:e5:f6:9b:33:b8:c3:99:a8:f5:04:d8:78:
fc:bc:6f:32:08:c9:d2:b0:ad:be:8e:c1:de:77:11:
34:12:52:52:00:da:52:f4:1d:9e:81:21:26:ff:4c:
ef:50:e5:fb:a0:83:b6:cb:a1:7a:50:af:f2:07:9d:
3b:89:95:6f:38:9b:81:03:a8:c8:01:15:d1:94:2a:
30:d7:f2:a4:cb:75:19:00:f3:56:39:76:f5:42:5b:
60:4e:84:1c:64:69:d1:32:18:eb:5b:48:49:14:75:
2d:61:dc:cc:7a:3e:0f:f2:66:97:83:78:a8:a6:68:
3e:f4:19:25:71:89:a6:a4:d7:47:4e:0d:91:28:7a:
cb:f7:a3:4c:e1:b5:76:06:be:6e:66:b6:f6:dc:03:
09:ad:37:49:b3:99:d1:fe:c0:12:d9:9f:e9:be:37:
7c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4E:9F:BF:6A:1D:B6:50:94:8B:33:27:C8:62:8E:D3:B5:D6:DE:D5
X509v3 Authority Key Identifier:
keyid:06:F7:66:F1:DE:13:AE:C7:FB:05:01:93:F8:32:9A:66:09:E0:09:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bvdm8d4Trsf7BQGT-DKaZgngCV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/jk6fv2odtlCUizMnyGKO07XW3tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/4910b2-b709-408f-a9e4-ed1408e71c1f/1/Bvdm8d4Trsf7BQGT-DKaZgngCV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.72.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:ef:51:0e:1f:48:ac:b4:78:1e:32:91:dc:c0:10:9e:b2:6f:
3b:9c:1c:01:9b:9b:e5:d8:ca:28:15:7d:df:08:32:f2:7f:39:
a8:c8:cc:db:33:84:8e:a7:87:ed:59:83:c3:f0:f6:a0:77:e0:
59:dd:bf:03:81:a0:cc:d5:ef:8e:ec:ab:49:b6:dc:fa:1c:2a:
1e:25:4b:13:76:a1:b9:45:d4:59:b1:ca:9d:51:cf:ea:4d:e2:
40:cc:11:0e:c3:bc:66:85:f5:8b:e2:0a:bb:86:42:b9:97:6a:
33:e6:b0:46:4a:ac:cf:e0:4b:28:5d:e9:0b:d3:d8:2e:11:63:
a6:1e:68:27:52:38:d3:54:a7:5e:8c:6c:99:2a:2d:98:ab:97:
7f:7d:47:1e:b2:15:53:dd:eb:83:c7:f1:45:59:11:ab:14:79:
bb:7f:8c:ae:0c:4d:49:f3:c5:e1:48:65:ba:ff:e6:f3:8f:7c:
4f:8c:8d:bf:19:79:85:75:8b:c7:3d:60:7b:34:c1:4a:7b:3c:
1e:0e:ce:58:48:3c:db:96:3a:37:38:43:73:3e:28:27:4f:0a:
34:4c:09:4a:6e:95:bf:d3:72:ce:8e:47:76:47:72:b4:da:86:
69:9b:fc:d2:76:5a:43:0c:64:85:47:8b:7f:d7:b0:4c:51:55:
5a:20:46:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:01 2023 by rpki-client on console-ams.rpki-client.org